PAM CyberArk Engineer – SDS QRO

Jobtailor; Santiago de Querétaro; Presencial; MXN 600.000 - 900.000; Jornada completa

Descripción de la vacante

Jobtailor in Querétaro, Mexico seeks a seasoned CyberArk Engineer to design, deploy, and maintain the on-premises CyberArk PAS suite and related components across infrastructure and applications.

You will integrate CyberArk with LDAP/AD, SIEM, and cloud platforms, build custom connectors, enforce privileged access policies, and lead complex projects with minimal supervision while mentoring junior engineers. This role requires strong scripting skills and security-focused mindset.

Formación

• 5–8+ years of experience in Information Security or Identity and Access Management.
• 3–5+ years of hands-on CyberArk engineering experience.
• Strong understanding of privileged access management principles.
• Proficiency with PowerShell, Python, or equivalent scripting languages.
• Windows and Linux administration.
• Active Directory, LDAP, and MFA integrations.
• Networking basics, including firewalls, proxies, and DNS.
• Experience supporting large-scale, high-availability PAM environments.
• CyberArk Defender, Sentry, or Guardian certifications preferred.
• Experience with threat and vulnerability management related to privileged access.
• Background in regulated industries such as finance, healthcare, or government preferred.
• Strong analytical, problem-solving, and debugging skills.
• Excellent communication and documentation abilities.
• Ability to lead complex projects with minimal supervision.
• High attention to detail and commitment to security best practices.

Responsabilidades

• Design, deploy, configure, and maintain the full on-premises CyberArk PAS suite.
• Implement and maintain CyberArk safes, platforms, policies, and connectors.
• Integrate CyberArk with LDAP/AD, SIEM ticketing systems, and AWS, Azure, and GCP.
• Build and maintain custom connectors and plugins for applications and infrastructure.
• Develop and enforce privileged access policies and best practices.
• Conduct threat modeling and align PAM with SOX, GLBA, NYDFS.
• Review privileged access workflows and recommend security improvements.
• Automate onboarding using REST APIs, PowerShell, Python, or similar tools.
• Tune CPM/PSM performance, optimize vault operations, and improve credential rotation.
• Implement continuous monitoring, alerting, and reporting mechanisms.
• Serve as a CyberArk SME across infrastructure, development, and security teams.
• Troubleshoot vaulting, credential, and session management issues.
• Perform CyberArk upgrades, patching, health checks, and hardening.
• Participate in on-call rotations and provide escalation-level support.
• Collaborate with IAM, security operations, risk, and compliance stakeholders.
• Provide guidance and mentorship to junior engineers.
• Develop documentation, runbooks, and best practice guides.

Conocimientos

Analytical Skills

Problem-Solving Skills

Communication Abilities

Attention to Detail

Mentorship

Herramientas

CyberArk PAS Suite

REST APIs

Python Scripting

Windows Administration

Linux Administration

Active Directory Integration

LDAP

MFA Integrations

AWS

Azure

GCP

SIEM Systems

Credential Management

Vault Operations Optimization

Descripción del empleo

• Design, deploy, configure, and maintain the full on-premises CyberArk Privileged Access Security (PAS) suite, including EPV, PSM, PSM-SSH, CPM, and PTA
• Implement and maintain CyberArk safes, platforms, policies, and connectors
• Integrate CyberArk with LDAP/AD, SIEM ticketing systems, and AWS, Azure, and GCP cloud platforms
• Build and maintain custom connectors and plugins for applications and infrastructure
• Develop and enforce privileged access policies and best practices
• Conduct threat modeling and align PAM with regulatory frameworks including SOX, GLBA, and NYDFS
• Review privileged access workflows and recommend security improvements
• Automate onboarding using REST APIs, PowerShell, Python, or similar tools
• Tune CPM/PSM performance, optimize vault operations, and improve automated credential rotation
• Implement continuous monitoring, alerting, and reporting mechanisms
• Serve as a CyberArk subject matter expert across infrastructure, development, and security teams
• Troubleshoot complex vaulting, credential, and session management issues
• Perform CyberArk upgrades, patching, health checks, and system hardening
• Participate in on-call rotations and provide escalation-level support
• Collaborate with IAM, security operations, risk, and compliance stakeholders
• Provide guidance and mentorship to junior engineers
• Develop documentation, runbooks, and best practice guides

Requirements

• 5–8+ years of experience in Information Security or Identity and Access Management
• 3–5+ years of hands‑on CyberArk engineering experience
• Strong understanding of privileged access management principles
• Proficiency with PowerShell, Python, or equivalent scripting languages
• Windows and Linux administration
• Active Directory, LDAP, and MFA integrations
• Networking basics, including firewalls, proxies, and DNS
• Experience supporting large‑scale, high‑availability PAM environments
• CyberArk Defender, Sentry, or Guardian certifications preferred
• Experience with threat and vulnerability management related to privileged access
• Background in regulated industries such as finance, healthcare, or government preferred
• Strong analytical, problem‑solving, and debugging skills
• Excellent communication and documentation abilities
• Ability to lead complex projects with minimal supervision
• High attention to detail and commitment to security best practices

Core Competencies

Demonstrates expertise in CyberArk Privileged Access Security suite implementation and management, including integration with cloud platforms and regulatory compliance. Proficient in scripting and automation to enhance security operations and optimize privileged access workflows.

Highest-signal resume keywords

• CyberArk Engineering Experience
• Privileged Access Management Principles
• PowerShell Scripting
• Active Directory Integration
• CyberArk Certifications

Hard Skills

• CyberArk PAS Suite
• REST APIs
• Python Scripting
• Windows Administration
• Linux Administration
• Threat Modeling
• Credential Management
• Vault Operations Optimization
• Continuous Monitoring
• Security Best Practices

Soft Skills

• Analytical Skills
• Problem‑Solving Skills
• Communication Abilities
• Attention to Detail
• Mentorship

Certifications & Qualifications

• CyberArk Defender
• CyberArk Sentry
• CyberArk Guardian

Industry Keywords

• Information Security
• Identity and Access Management
• Regulated Industries
• Finance
• Healthcare
• Government
• SOX Compliance
• GLBA Compliance
• NYDFS Compliance

Tools & Technologies

• AWS
• Azure
• GCP
• SIEM Systems
• LDAP
• MFA
• Firewalls
• Proxies
• DNS